Hello,
i want to migrate from samba 3.2.6-37 (sernet-built on sles9) to
3.3.12-25 (sernet-built on debian lenny). It's a domain member server in
an w2k3 ad with all company files on it. I migrated the smb.conf and
moved the winbindd_idmap.tdb to the lenny server. The winbind idmap
options are still the same with tdb as idmap backend and don't conflict
with entries of /etc/group and /etc/passwd. My gid range starts by 10000
(10000 was originally mapped by winbind to domain-users). Now on lenny
it seems that samba overrides the winbindd_idmap of the domain-users to
BUILTIN\administrators. A "wbinfo -Y S-1-5-32-544" with a result of
10000 confirmed my assumptions. I don't know why samba behaves like
this. For further analysis i attach the global section of the smb.conf.
Anyone an idea?
Thanks
Thorsten
[global]
unix charset = ISO8859-15
display charset = ISO8859-15
workgroup = SCHARRNET
realm = SCHARRNET.DE
server string =
interfaces = 127.0.0.1, eth0
bind interfaces only = Yes
security = ADS
password server = OMBRE DC1
log level = 2
socket options = SO_KEEPALIVE IPTOS_LOWDELAY TCP_NODELAY
load printers = No
printcap name = cups
add share command = /usr/local/bin/modify_samba_config.pl
change share command = /usr/local/bin/modify_samba_config.pl
delete share command = /usr/local/bin/modify_samba_config.pl
panic action = /usr/share/samba/panic-action %d
idmap uid = 10000-20000
idmap gid = 10000-20000
winbind separator = +
winbind cache time = 900
winbind enum users = Yes
winbind enum groups = Yes
ea support = Yes
map acl inherit = Yes
hide unreadable = Yes
veto oplock files = /*.mdb/*.MDB/
store dos attributes = Yes
dos filemode = Yes
dos filetime resolution = Yes
--
Thorsten Leiser
IT-Systembetreuung
SYNCHRON Gesellschaft für betriebswirtschaftliche
Beratung und Informationssysteme mbH
Liebknechtstr. 50
70565 Stuttgart-Vaihingen
--
To unsubscribe from this list go to the following URL and read the
instructions: https://lists.samba.org/mailman/options/samba
